Applied changes from 63c164a to default Wireguard setup

tasks/wireguard.yml

@@ -1,4 +1,4 @@
-- name: Copy wireguard configuration files
+- name: Copy Wireguard configuration files
   become: true
   ansible.builtin.template:
     src: '{{ item.src }}'
@@ -13,14 +13,7 @@
       dest: '/etc/systemd/network/wg0.network'
   notify: restart systemd-networkd
 
-- name: Copy mobile configuration
+- name: Create Wireguard directories
-  ansible.builtin.template:
-    src: 'templates/network/wireguard/default/mobile.wireguard.j2'
-    dest: '/tmp/mobile.conf'
-    mode: '0600'
-  when: copy_vpn_configurations
-
-- name: Create wireguard directories
   become: true
   ansible.builtin.file:
     path: '{{ item | dirname }}'
@@ -28,10 +21,9 @@
     group: systemd-network
     mode: '0640'
     state: directory
+    recurse: true
   loop:
     - '{{ vpn_key_directory }}'
-    - '{{ vpn_server_key_path }}'
-    - '{{ vpn_server_public_key_path }}'
 
 - name: Copy Wireguard server credentials
   become: true
@@ -63,7 +55,7 @@
       dest: '{{ vpn_key_directory }}/private/mobile.key'
   notify: restart systemd-networkd
 
-- name: Copy wireguard preshared keys
+- name: Copy Wireguard preshared keys
   become: true
   ansible.builtin.copy:
     src: '{{ item.value.preshared_key_source_path }}'
@@ -73,3 +65,12 @@
     mode: '0640'
   with_dict: '{{ vpn_peers }}'
   notify: restart systemd-networkd
+
+- name: Copy Wireguard mobile configuration
+  become: true
+  ansible.builtin.template:
+    src: 'templates/network/wireguard/default/mobile.wireguard.j2'
+    dest: '/tmp/mobile.conf'
+    mode: '0600'
+    owner: '{{ ansible_user_id }}'
+  when: copy_vpn_configurations

templates/network/wireguard/default/mobile.wireguard.j2

@@ -5,7 +5,7 @@ Address={{ vpn_peers.mobile.ip }}/24
 PrivateKey={{ lookup("file", vpn_peers.mobile.private_key_source_path) }}
 
 [Peer]
-PublicKey={{ lookup("file", vpn_server_public_key_path) }}
+PublicKey={{ lookup("file", vpn_server_public_key_source_path) }}
-PresharedKey={{ lookup("file", vpn_peers.mobile.preshared_key_path) }}
+PresharedKey={{ lookup("file", vpn_peers.mobile.preshared_key_source_path) }}
 AllowedIPs={{ vpn_listen_address }}/32
 Endpoint={{ domain_name }}:{{ vpn_port }}

vars/vpn.yml

@@ -8,6 +8,7 @@ vpn_destination_range: '10.0.0.1/32'
 
 vpn_key_directory: '/etc/wireguard/keys'
 vpn_server_public_key_path: '{{ vpn_key_directory }}/public/server.pub'
+vpn_server_public_key_source_path: 'files/wireguard/default/server.pub'
 vpn_server_key_path: '{{ vpn_key_directory }}/private/server.key'
 
 copy_vpn_configurations: false